$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c406957-79fc-3eb9-96a2-0df08e0960df.roa File: 7c406957-79fc-3eb9-96a2-0df08e0960df.roa (raw, json) Hash identifier: D1YyLR/8fEiSPvRLJ0PNS9ZG7i/cx+r+7vNdb83638g= Subject key identifier: 8D:12:6C:85:95:4B:0F:FF:BA:1E:39:54:0D:CF:32:A2:D5:38:87:0C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA566C977087CA4E8050E3980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c406957-79fc-3eb9-96a2-0df08e0960df.roa Signing time: Sun 26 Oct 2025 04:23:11 +0000 ROA not before: Sun 26 Oct 2025 04:23:11 +0000 ROA not after: Sat 24 Jan 2026 05:23:11 +0000 asID: 834 IP address blocks: 72.244.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:66:c9:77:08:7c:a4:e8:05:0e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 26 04:23:11 2025 GMT Not After : Jan 24 05:23:11 2026 GMT Subject: CN=7cdca8a3-de88-4565-a1b1-24a97fcda058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6c:c7:ba:2c:cf:d0:4e:46:bb:6b:d1:66:e2: 7f:65:dd:47:27:86:af:ca:9b:c3:0b:50:4c:43:0b: f7:f2:fe:04:c5:fb:83:8d:ee:48:e6:56:b5:91:da: 8f:62:ed:ea:03:1b:61:49:b9:91:46:8a:9c:9e:ef: 5f:a9:ed:5b:c9:ee:26:47:d8:00:22:66:34:b1:f1: 9b:b5:c4:f1:6b:6b:f4:68:a3:d7:c2:07:83:48:2e: 96:68:23:ae:49:57:4d:77:2b:6a:51:ff:f2:87:12: 47:5d:cc:33:4b:0e:d5:c7:a3:f4:b0:f5:3a:a9:06: 41:5f:01:1a:75:da:42:38:05:65:0a:8c:c4:8d:75: 37:7f:c3:6c:84:ac:fd:96:8b:c3:1c:0b:39:2d:7f: 2e:08:79:24:9f:6e:94:4b:fd:d0:2b:f2:77:46:ba: 2a:68:5b:5c:b6:c0:38:b0:b0:e0:01:a9:1f:41:c1: c7:21:bd:69:c1:eb:d5:07:b0:42:3a:e3:01:90:a3: 62:2d:41:46:ff:02:de:78:18:19:1c:67:f5:06:35: 53:54:40:25:6b:f4:ef:86:bc:db:ab:e8:b5:4b:30: 95:ee:01:a6:fc:d5:62:18:b8:1c:23:af:e3:20:cb: 5c:a3:73:c2:49:8e:8f:c4:05:60:18:86:1f:82:1c: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:12:6C:85:95:4B:0F:FF:BA:1E:39:54:0D:CF:32:A2:D5:38:87:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c406957-79fc-3eb9-96a2-0df08e0960df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ba:13:28:0e:86:8b:36:80:76:30:30:ad:93:c9:c7:de:28: 46:0e:60:ea:33:77:11:5f:a4:b3:a7:b8:e4:64:96:54:a0:d2: c3:7a:95:73:0d:aa:2b:06:44:a6:a7:0d:06:31:be:ef:99:cb: 3e:3b:48:20:b4:ce:d9:93:16:b9:52:22:cf:3c:73:b4:68:56: 7e:ab:fd:0b:20:d9:b3:21:97:5f:83:7d:b7:07:20:4d:2d:f8: 0d:a7:de:c8:3a:c6:43:5e:cc:02:05:a9:10:60:d4:47:95:ab: cd:d0:1c:91:a1:f6:e7:8b:2e:c6:93:d3:55:17:c4:72:56:10: 79:0a:a6:fb:5a:7d:65:e5:5d:eb:ce:38:7b:24:43:d4:7c:dc: 96:65:82:d2:46:19:08:d8:8d:d4:94:23:5d:25:d4:09:dc:30: 03:b9:c3:ca:63:3f:cc:fd:66:71:63:ce:ca:15:e1:53:82:db: bc:c6:59:59:3b:52:f3:23:0a:85:91:2d:64:78:d5:4a:a0:a1: 0e:d7:1a:85:b5:15:36:a4:0a:77:95:af:ac:c6:d4:c7:58:7d: 36:7e:fa:fa:25:f6:4d:e9:a0:5e:ff:46:2e:bd:23:9d:55:65: 66:ac:b0:da:da:35:24:7a:27:65:e8:0b:19:02:51:fb:c0:fe: 17:03:2e:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulZsl3CHyk6AUOOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNjA0MjMxMVoXDTI2MDEyNDA1MjMxMVowLzEtMCsGA1UEAxMk N2NkY2E4YTMtZGU4OC00NTY1LWExYjEtMjRhOTdmY2RhMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGzHuizP0E5Gu2vRZuJ/Zd1HJ4avypvDC1BM Qwv38v4ExfuDje5I5la1kdqPYu3qAxthSbmRRoqcnu9fqe1bye4mR9gAImY0sfGb tcTxa2v0aKPXwgeDSC6WaCOuSVdNdytqUf/yhxJHXcwzSw7Vx6P0sPU6qQZBXwEa ddpCOAVlCozEjXU3f8NshKz9lovDHAs5LX8uCHkkn26US/3QK/J3RroqaFtctsA4 sLDgAakfQcHHIb1pwevVB7BCOuMBkKNiLUFG/wLeeBgZHGf1BjVTVEAla/Tvhrzb q+i1SzCV7gGm/NViGLgcI6/jIMtco3PCSY6PxAVgGIYfghzGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0SbIWVSw//uh45VA3PMqLVOIcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2M0MDY5NTctNzlmYy0z ZWI5LTk2YTItMGRmMDhlMDk2MGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALm6EygOhos2gHYwMK2TycfeKEYOYOozdxFfpLOnuORkllSg0sN6lXMN qisGRKanDQYxvu+Zyz47SCC0ztmTFrlSIs88c7RoVn6r/Qsg2bMhl1+DfbcHIE0t +A2n3sg6xkNezAIFqRBg1EeVq83QHJGh9ueLLsaT01UXxHJWEHkKpvtafWXlXevO OHskQ9R83JZlgtJGGQjYjdSUI10l1AncMAO5w8pjP8z9ZnFjzsoV4VOC27zGWVk7 UvMjCoWRLWR41UqgoQ7XGoW1FTakCneVr6zG1MdYfTZ++vol9k3poF7/Ri69I51V ZWassNraNSR6J2XoCxkCUfvA/hcDLt8= -----END CERTIFICATE-----Generated at Fri Oct 31 05:36:11 2025 by rpki-client